# ITIF Urges NIST to Modernize Vulnerability Database

An ITIF public comment responding to NIST’s August 2026 request for information proposes modernizing the National Vulnerability Database (NVD) with AI-assisted processing, machine-readable data, improved product identifiers, and clearer division of responsibilities between NIST and CISA. The comment is a policy recommendation, not an award or solicitation: it announces no funding and creates no new mandatory requirement. For contractors, it points to potential future demand for vulnerability-data ingestion and validation tools, interoperability, cybersecurity analytics, and auditable AI workflows, contingent on NIST’s response and any subsequent procurement activity.

- Companies supporting federal cybersecurity programs can assess whether their data pipelines and tools support structured, machine-readable, traceable vulnerability information.
- Technology providers may find future opportunities in NVD modernization capabilities, but the comment itself does not establish a funded procurement or open a solicitation.
- The proposed use of AI and clearer NIST–CISA responsibilities may shape future technical and coordination needs; contractors should distinguish these recommendations from current binding requirements.

**Jurisdictions:** federal
**Industries:** Information Technology
**Topics:** Cybersecurity, Artificial Intelligence
**Published:** October 09, 2026

### Government Entities
- National Institute of Standards and Technology (NIST)
- Cybersecurity and Infrastructure Security Agency (CISA)

### Vendors
- Amazon ()
- Anthropic ()
- Google DeepMind ()
- Microsoft ()

### Sources
- [Comments to NIST Regarding Modernizing the National Vulnerability Database in the Age of AI | Testimonies & Filings | Oct 12, 2026 | ITIF](https://itif.org/publications/2026/10/12/comments-to-nist-modernizing-nvd-age-of-ai) - Information Technology and Innovation Foundation